After you are able to find and remove the keylogger change your admin password and also set it to lock computer after screensaver. Then just make a guest account for him so he don't complain that he wants to get on. With the guest account he can't install anything without your admin password. Or even with a normal account he can't install anything because it requires an admin password.